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MINISTRY OF COMMUNICATIONS AND 
INFORMATION TECHNOLOGY 
(Department of Information Technology) 
NOTIFICAnON 

New Delhi, the 18th January, 2006 

G.S.R. 32(E). —In exercise of the powers conferred 
by Section 87 of the Information Technology Act, 2000 (21 
of 2000), the Central Government hereby makes the 
following amendments in the Information Technology 
(Certifying Authorities) Rules, 2000, namely,:— 

1. (1) These rules may be called the Information 
Technology (Certifying Authorities) (Amendment) Rules, 
2005. 

(2) They shall come into foroe on the date of their 
publication in the Official Gazette. 

2. In the Information Technology (Certifying 
Authorities) Rules, 2000, in rule 31, for sub-rule (2), the 
following shall be substituted, namely :— 

“(2) The Certifying Authority shall conduct half 
yearly internal audit of the security policy, physical security, 
planning of its operations and the repository.” 

(F. No. 9(2)/2003-EC] 
M. MADHAVAN NAMBIAR, Addl. Secy. 

Note : The Principal rules were published vide 
number G.S.R. 789(E), dated the 17th October, 2000 and 
was last amended v/fife nmumber G.S.R. 245(E), dated the 
21st April, 2005: 
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